ScreenConnect is a remote access tool (RAT) used for remote meetings. Powerkatz is a PowerShell version of Mimikatz. New intelligence about the actors behind the attack on India’s largest IT outsourcing and consulting organization Wipro has emerged lately. It is found that the attack on Wipro was conducted using ScreenConnect and Powerkatz. What does the new update say? Researchers from ...
Read More »Blog
Extortionist hacks IT provider used by the stars of tech and big biz, leaks customer info after ransom goes unpaid
‘Many companies pay us for our work, and we do not publish data and help them to eliminate vulnerabilities’ A service provider hired by the likes of Oracle, SAP, BT, and many others, to manage their IT systems has been hacked – and its client data held to ransom. At the turn of this month, Germany-based CityComp was broken into ...
Read More »Windows Server hosting provider still down a week after ransomware attack
A ransomware infection has crippled the operations of a US-based web hosting provider for almost eight days now, several of the company’s disgruntled customers have told ZDNet today. Impacted are all Windows-based servers owned by A2 Hosting, a provider of virtual private servers (VPS) and WordPress hosting services. CUSTOMERS LOSING MONEY The infection, which took place last week on April ...
Read More »Malvertising campaign targeting accountants distributes six different malware families
This malvertising campaign targeted Russian organizations with an aim to compromise accountants’ computers. The six different malware families such include Buhtrap banking trojan, RTM banking trojan, Clipbanker trojan, VegaLocker ransomware, and cryptocurrency miners. ESET researchers have observed a new malvertising campaign that leverages Yandex.Direct network to distribute malware onto victims’ computers and steal cryptocurrency. Yandex.Direct is an online advertising network ...
Read More »New phishing scam impersonating Chase bank asks for sensitive data including selfies
A new phishing scam pretending to be from Chase bank targets customers’ PII, login credentials, banking details, as well as selfies. This way, the scammers have collected all the details right from basic details and credentials such as Chase account login credentials, email credentials, names, dates of birth, addresses, phone numbers, to sensitive information such as payment card details, Social ...
Read More »Asia-Pacific Supplants North America as Most Breached Region
The Asia-Pacific region led in the number of data compromises investigated in 2017, accounting for 35% of instances and overtaking North America at 30%, down from 43%. Europe, Middle East and Africa (EMEA) came in third at 27%, followed by Latin America & Caribbean (LAC) at 8%. The retail sector experienced the highest number of incidences at 18%. The finance ...
Read More »Fortinet – FortiGate Firewalls & Security Products
Fortinet – FortiGate Firewalls & Security Products FortiGate® Network Security Platform Single vendor, comprehensive portfolio Fortinet Consolidated Security Platform delivers unmatched performance and protection while simplifying your network. Fortinet’s Network Security Appliances offer models to satisfy any deployment requirement from the FortiGate-20 series for Small Offices to the FortiGate-5000 series for very Large Enterprises, Service Providers and Carriers. FortiGate platforms integrate ...
Read More »Firewall Checklist
Firewall Hardening Checklist This checklist should be used to audit a firewall. This checklist does not provide vendor specific security considerations but rather attempts to provide a generic listing of security considerations to be used when auditing a firewall.Only technical aspects of security are addressed in this checklist. Manual elements like physical protection for the firewall server is not considered. ...
Read More »Click Rates in Phishing Simulations = Major Cybersecurity Risks
A recent study found that healthcare organizations are most susceptible to phishing attempts, with employees clicking one in seven simulated emails sent. The research report, Assessment of Employee Susceptibility to Phishing Attacks at U.S. Healthcare Facilities, reveals current click rates in phishing simulations at U.S. healthcare organizations indicate a major cybersecurity risk. Under simulation, a large number of employees clicked on ...
Read More »Ransomware attack hits Cleveland Airport crippling email services and information screens
A ransomware attack hit Cleveland Hopkins International Airport disabling information screens displaying in-airport flight arrivals, departures and baggage claims. The City of Cleveland calls this attack as an isolated technical issue that has impacted a limited number of systems. What is the issue – On April 22, 2019, a ransomware attack hit Cleveland Hopkins Internation Airport disabling information screens that display ...
Read More »